$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json) Hash identifier: Xsgrz8NnKHgPDm7BNgiGfkdUCZQXfqh64hlgocYm968= Subject key identifier: 0B:55:CE:90:07:8B:7E:28:83:B4:66:40:70:B2:3B:4C:DB:CC:8A:12 Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Certificate serial: 0576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft Manifest number: 0570 Signing time: Sat 14 Jun 2025 23:04:08 +0000 Manifest this update: Sat 14 Jun 2025 23:04:08 +0000 Manifest next update: Sat 21 Jun 2025 23:04:08 +0000 Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: eSzNTUlYVBU9Kq6uaVznVYXi3s4q4qUpajNVtL8lX1w=) 2: 529F69FCE5CA11EBB98C5577C4F9AE02.roa (hash: yEoo0/2ZbdS1AKMgT4F4l5jk6+ByUwD65kyD3NyUV9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Validity Not Before: Jun 14 23:04:08 2025 GMT Not After : Jun 21 23:04:08 2025 GMT Subject: CN=684dffe8-864c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:02:6b:7c:7d:78:a6:44:15:9f:17:9a:a6:e8: ea:f2:e3:e7:6b:48:dc:3f:b6:12:2c:5d:d3:99:25: a8:25:2a:2d:81:f1:7a:8e:49:00:84:12:3b:7f:9e: c3:c9:51:43:9e:a8:69:68:99:b9:50:5b:d7:ec:77: ee:2c:d5:07:dd:66:5e:ae:ce:91:0e:63:64:1d:78: c1:8d:43:06:cb:2c:23:58:e6:16:12:4e:10:1e:fa: a3:f5:58:4b:af:64:75:6c:8c:53:28:c3:a3:8a:fd: 33:77:c7:6b:68:30:c6:46:51:da:a4:d5:9a:aa:47: de:5d:31:ea:4c:d6:22:8a:e7:d0:0f:1d:8e:03:7e: fe:b6:ab:1a:c4:32:4a:9f:b5:ce:98:bc:4d:56:87: 72:78:cf:86:eb:5f:85:d2:9e:18:1a:eb:d4:02:36: 6d:18:69:23:25:2a:36:01:8e:95:eb:55:95:ee:62: 5d:d3:d9:0e:c9:2f:a0:ae:3c:4f:c2:32:18:fc:8f: 72:19:76:6f:0f:20:7d:81:21:f3:73:2d:0c:e3:37: a8:fe:62:71:16:93:a6:25:ae:11:c8:ab:81:61:d8: e6:1f:9c:26:d0:2b:24:65:a8:fe:71:7a:f0:c6:8d: d6:4b:3f:2e:76:dc:ec:e9:17:79:f7:93:1d:f2:db: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:55:CE:90:07:8B:7E:28:83:B4:66:40:70:B2:3B:4C:DB:CC:8A:12 X509v3 Authority Key Identifier: keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:69:4d:9d:9c:81:27:a6:0e:36:f7:9b:b4:52:cb:a5:f5:83: d4:f3:a6:56:7d:b5:a3:71:c9:a6:54:fa:50:7f:b9:92:54:bc: 5b:07:67:cb:01:a3:c6:56:bb:31:c9:22:94:7d:51:ce:ed:22: b5:53:eb:d4:50:ea:e3:d7:36:e5:10:ed:9a:4f:65:e8:2d:95: 21:03:fe:26:8d:7d:de:c4:5a:55:6c:53:9c:59:25:3a:98:8b: b2:e7:a3:25:ab:c8:81:d4:e9:d0:ca:77:e6:79:0d:0b:e3:f4: 0a:23:9b:a1:22:93:81:36:48:35:97:ff:52:af:ff:03:4f:0b: 5e:c5:af:48:db:c1:83:0a:4c:47:63:09:41:e0:03:9a:da:0f: 36:20:59:f2:f9:ea:d8:8f:9b:f1:c7:99:a0:c0:27:e8:24:39: c6:ef:b5:9e:d0:22:29:bb:0e:82:1f:6d:29:5e:dd:ec:9b:88: 51:f8:77:77:71:55:d1:67:f0:fb:75:7d:50:e9:68:b3:f8:d8: 55:64:71:7f:ee:8e:98:63:3e:17:35:ba:88:07:9e:b8:f2:45: fa:ac:8a:eb:74:b1:ca:6d:41:f4:55:b8:43:88:9a:ea:24:8f: b9:b4:4b:e2:ba:e6:b2:c5:9a:b0:70:9e:cc:d9:e2:e9:f0:bb: 34:fc:9c:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUYxMTAvBgNVBAUTKEI2NjQ1MUY5NzE4OENBRjgxODREMDdDMTMwQTI1RDk1 NzZGOEMxMDUwHhcNMjUwNjE0MjMwNDA4WhcNMjUwNjIxMjMwNDA4WjAYMRYwFAYD VQQDEw02ODRkZmZlOC04NjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wJrfH14pkQVnxeapujq8uPna0jcP7YSLF3TmSWoJSotgfF6jkkAhBI7f57D yVFDnqhpaJm5UFvX7HfuLNUH3WZers6RDmNkHXjBjUMGyywjWOYWEk4QHvqj9VhL r2R1bIxTKMOjiv0zd8draDDGRlHapNWaqkfeXTHqTNYiiufQDx2OA37+tqsaxDJK n7XOmLxNVodyeM+G61+F0p4YGuvUAjZtGGkjJSo2AY6V61WV7mJd09kOyS+grjxP wjIY/I9yGXZvDyB9gSHzcy0M4zeo/mJxFpOmJa4RyKuBYdjmH5wm0CskZaj+cXrw xo3WSz8udtzs6Rd595Md8ttfEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtVzpAH i34og7RmQHCyO0zbzIoSMB8GA1UdIwQYMBaAFLZkUflxiMr4GE0HwTCiXZV2+MEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0 QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2Z1lUUWZCTUtKZGxYYjR3 UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtUlItWEdJeXZnWVRRZkJNS0pkbFhiNHdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2 Z1lUUWZCTUtKZGxYYjR3UVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKaU2dnIEnpg4295u0Usul9YPU86ZWfbWjccmmVPpQf7mSVLxbB2fL AaPGVrsxySKUfVHO7SK1U+vUUOrj1zblEO2aT2XoLZUhA/4mjX3exFpVbFOcWSU6 mIuy56Mlq8iB1OnQynfmeQ0L4/QKI5uhIpOBNkg1l/9Sr/8DTwtexa9I28GDCkxH YwlB4AOa2g82IFny+erYj5vxx5mgwCfoJDnG77We0CIpuw6CH20pXt3sm4hR+Hd3 cVXRZ/D7dX1Q6Wiz+NhVZHF/7o6YYz4XNbqIB5648kX6rIrrdLHKbUH0VbhDiJrq JI+5tEviuuayxZqwcJ7M2eLp8Ls0/Jzx -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:13 2025 by rpki-client